diff options
| author | Karl 'vollmerk' Vollmer <vollmer@ampache.org> | 2009-12-20 16:52:43 +0000 |
|---|---|---|
| committer | Karl 'vollmerk' Vollmer <vollmer@ampache.org> | 2009-12-20 16:52:43 +0000 |
| commit | d8ea07a04acc03160ac73f5db2a9249890e5fd13 (patch) | |
| tree | 63e0dfedbfc9565a265cb342da405cd79b4ff341 /admin/users.php | |
| parent | 69c56f829da3fc44e6dbcc14c364901b86f55421 (diff) | |
| download | ampache-d8ea07a04acc03160ac73f5db2a9249890e5fd13.tar.gz ampache-d8ea07a04acc03160ac73f5db2a9249890e5fd13.tar.bz2 ampache-d8ea07a04acc03160ac73f5db2a9249890e5fd13.zip | |
sync from 3.5.x and fix display issue on playlist view
Diffstat (limited to 'admin/users.php')
| -rw-r--r-- | admin/users.php | 8 |
1 files changed, 6 insertions, 2 deletions
diff --git a/admin/users.php b/admin/users.php index 2726b740..9e6f138b 100644 --- a/admin/users.php +++ b/admin/users.php @@ -149,7 +149,11 @@ switch ($_REQUEST['action']) { require_once Config::get('prefix') . '/templates/show_edit_user.inc.php'; break; case 'confirm_delete': - if (Config::get('demo_mode')) { break; } + if (Config::get('demo_mode')) { break; } + if (!Core::form_verify('delete_user')) { + access_denied(); + exit; + } $client = new User($_REQUEST['user_id']); if ($client->delete()) { show_confirmation(_('User Deleted'), sprintf(_('%s has been Deleted'), $client->username), Config::get('web_path'). "/admin/users.php"); @@ -163,7 +167,7 @@ switch ($_REQUEST['action']) { $client = new User($_REQUEST['user_id']); show_confirmation(_('Deletion Request'), sprintf(_('Are you sure you want to permanently delete %s?'), $client->fullname), - Config::get('web_path')."/admin/users.php?action=confirm_delete&user_id=" . $_REQUEST['user_id'],1); + Config::get('web_path')."/admin/users.php?action=confirm_delete&user_id=" . $_REQUEST['user_id'],1,'delete_user'); break; /* Show IP History for the Specified User */ case 'show_ip_history': |